2056 matches found
CVE-2018-20911: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows code execution because "." is in @INC during a Perl syntax check of cpaddonsup SEC-359...
CVE-2018-20909: Incorrect Permission Assignment for Critical Resource
cPanel before 70.0.23 allows arbitrary file-chmod operations during legacy incremental backups SEC-338...
CVE-2018-20916: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows Stored XSS via a WHM Edit MX Entry SEC-370...
CVE-2018-20905: Incorrect Permission Assignment for Critical Resource
cPanel before 71.9980.37 allows attackers to make API calls that bypass the backup feature restriction SEC-429...
CVE-2018-20926: Unrestricted Upload of File with Dangerous Type
cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...
CVE-2018-20918: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS in WHM DNS Cluster SEC-372...
CVE-2018-20931: Improper Control of Generation of Code
cPanel before 70.0.23 allows demo accounts to execute code via the Landing Page SEC-405...
CVE-2018-20949: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in WHM Apache Configuration Include Editor SEC-385...
CVE-2018-20948: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in cPanel Backup Restoration SEC-383...
CVE-2018-20903: Improper Neutralization of Input During Web Page Generation
cPanel before 71.9980.37 allows self XSS in the WHM Backup Configuration interface SEC-421...
CVE-2018-20950: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self stored XSS in WHM Account Transfer SEC-386...
CVE-2018-20939: Exposure of Sensitive Information to an Unauthorized Actor
cPanel before 68.0.27 allows a user to discover contents of directories that are not owned by that user by leveraging backups SEC-339...
CVE-2018-20953: Improper Neutralization of Input During Web Page Generation
cPanel before 68.0.27 allows self XSS in the WHM listips interface SEC-389...
CVE-2018-20915: Improper Neutralization of Input During Web Page Generation
cPanel before 70.0.23 allows stored XSS via a WHM Edit DNS Zone action SEC-369...
CVE-2019-14409
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...
CVE-2019-14412
Maketext in cPanel before 78.0.2 allows format-string injection in the DCV checkdomainsviadns UAPI SEC-474...
CVE-2019-14411
cPanel before 78.0.2 does not properly restrict demo accounts from writing to files via the DCV UAPI SEC-473...
CVE-2019-14409
cPanel before 78.0.2 allows arbitrary file-read operations via Passenger adminbin SEC-466...